Skip to main content
CVE-2020-14421 Jun 18, 13:15 HIGH POC This Week

aaPanel through 6.6.6 allows remote authenticated users to execute arbitrary commands via the Script Content box on the Add Cron Job screen. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Aapanel
NVD GitHub
CVSS 3.1
7.2
EPSS
6.0%
CVE-2020-14443 Jun 18, 18:15 HIGH PATCH This Week

A SQL injection vulnerability in accountancy/customer/card.php in Dolibarr 11.0.3 allows remote authenticated users to execute arbitrary SQL commands via the id parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

PHP SQLi Dolibarr
NVD GitHub
CVSS 3.1
8.8
EPSS
1.1%
CVE-2020-14442 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2020-14441 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2020-14440 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
3.1%
CVE-2020-14439 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
2.4%
CVE-2020-14438 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2020-14437 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
1.8%
CVE-2020-14436 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
2.3%
CVE-2020-14435 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Command Injection Netgear Srk60 Firmware Srr60 Firmware Srs60 Firmware +4
NVD
CVSS 3.1
8.8
EPSS
1.0%
CVE-2020-14432 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by CSRF. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
0.4%
CVE-2020-14431 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by disclosure of administrative credentials. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2020-14430 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by disclosure of administrative credentials. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2020-14429 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by disclosure of administrative credentials. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +13
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2020-14428 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by disclosure of administrative credentials. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2020-14427 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by disclosure of administrative credentials. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2020-14426 Jun 18, 17:15 HIGH This Week

Certain NETGEAR devices are affected by disclosure of administrative credentials. Rated high severity (CVSS 8.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Netgear Rbr750 Firmware Rbr840 Firmware Rbr850 Firmware +9
NVD
CVSS 3.1
8.8
EPSS
0.5%
CVE-2020-3342 Jun 18, 03:15 HIGH This Week

A vulnerability in the software update feature of Cisco Webex Meetings Desktop App for Mac could allow an unauthenticated, remote attacker to execute arbitrary code on an affected system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Cisco Webex Meetings
NVD
CVSS 3.1
8.8
EPSS
3.8%
CVE-2020-9225 Jun 18, 14:15 HIGH This Week

FusionSphere OpenStack 6.5.1 have an improper permissions management vulnerability. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation Huawei Fusionsphere Openstack
NVD
CVSS 3.1
7.8
EPSS
0.2%
CVE-2020-12887 Jun 18, 19:15 HIGH PATCH This Week

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Integer Overflow vulnerability could allow attackers to cause unexpected behavior through arithmetic overflow.

Information Disclosure Integer Overflow Mbed Coap Arm
NVD GitHub
CVSS 3.1
7.5
EPSS
1.7%
CVE-2020-12885 Jun 18, 19:15 HIGH This Week

An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Mbed Os Arm
NVD GitHub
CVSS 3.1
7.5
EPSS
1.2%
CVE-2020-3263 Jun 18, 03:15 HIGH This Week

A vulnerability in Cisco Webex Meetings Desktop App could allow an unauthenticated, remote attacker to execute programs on an affected end-user system. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Cisco Webex Meetings
NVD
CVSS 3.1
7.5
EPSS
4.1%
CVE-2020-4059 Jun 18, 20:15 HIGH PATCH This Week

In mversion before 2.0.0, there is a command injection vulnerability. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

RCE Command Injection Node.js Mversion
NVD GitHub
CVSS 3.1
7.3
EPSS
2.6%
CVE-2020-3336 Jun 18, 03:15 HIGH This Week

A vulnerability in the software upgrade process of Cisco TelePresence Collaboration Endpoint Software and Cisco RoomOS Software could allow an authenticated, remote attacker to modify the filesystem. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Command Injection Cisco Roomos Telepresence Collaboration Endpoint
NVD
CVSS 3.1
7.2
EPSS
2.1%
CVE-2020-3296 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3295 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3294 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3293 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3292 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3291 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3290 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3289 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3288 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3287 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3286 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Buffer Overflow Cisco Rv320 Firmware Rv325 Firmware +4
NVD
CVSS 3.1
7.2
EPSS
3.2%
CVE-2020-3279 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Cisco Rv320 Firmware Rv325 Firmware Rv016 Firmware +3
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2020-3278 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Cisco Rv320 Firmware Rv325 Firmware Rv016 Firmware +3
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2020-3277 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Cisco Rv320 Firmware Rv325 Firmware Rv016 Firmware +3
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2020-3276 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Cisco Rv320 Firmware Rv325 Firmware Rv016 Firmware +3
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2020-3275 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Cisco Rv320 Firmware Rv325 Firmware Rv016 Firmware +3
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2020-3274 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Cisco Rv320 Firmware Rv325 Firmware Rv016 Firmware +3
NVD
CVSS 3.1
7.2
EPSS
2.8%
CVE-2020-3269 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Cisco Rv110W Firmware Rv215W Firmware Rv130W Firmware +1
NVD
CVSS 3.1
7.2
EPSS
2.6%
CVE-2020-3268 Jun 18, 03:15 HIGH This Week

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Cisco Rv110W Firmware Rv215W Firmware Rv130W Firmware +1
NVD
CVSS 3.1
7.2
EPSS
2.6%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy